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Amendments to the Claims: 

This listing of Claims will replace all prior versions, and listings, of claims in the 
application: 

1. (Currently Amended) A system for enhancing security of end user 
station access to an Internet and intranet over access network with an access point, 
comprising: 

a gateway packet data node; 
a packet data support node; 

wherein said gateway packet data node further comprises security indication 
providing means for providing an security indicated access point with a security 
criterium indication and for distributing said security criterium indication to said packet 
data support node; 

wherein said packet data support node further comprises a security enforcement 
mechanism[[,]] for preventing all other traffic not fulfilling the security criterium indication 
associated with said security indicated access point when there is a connection 
requiring security over the security indicated access point, at least until [[the]] a last 
packet of the security indicated access point connection has been sent. 

2. (Currently Amended) A system according to claim 1 wherein [[that]] 
the security criterium indication comprises a security marking indicating [[that]] the 
access point supports the provision of secure access point connections. 

3. (Currently Amended) A system according to claim 1, wherein the 
security criterium indication comprises an indication as to the criterium [[that is]] to be 
fulfilled for concurrent conflicting access point connections in order for [[them]] the 
concurrent conflicting access point connections to be allowed simultaneously with a first 
secure access point connection. 

4. (Currently Amended) A system according to claim 2, wherein [[that]] 
the security criterium indication comprises a flag, an attribute or a data structure. 
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5. (Canceled) 

6. (Currently Amended) A system according to claim 1 , wherein [[that]] 
the gateway packet data node comprises a Gateway GPRS Support Node (GGSN). 

7. (Currently Amended) A system according to, claim 1 wherein [[that]] 
the security indicating and distributing means are provided in a Home Location Register 
(HLR). 

8. (Currently Amended) A system according to claim 1, wherein [[that]] 
the security indicating and distributing means are provided in a Domain Name Server 
(DNS). 

9. (Currently Amended) A system according to claim 1, wherein [[that]] 
Ihe security indicating means are provided in a CGSN comprising the functionality of a 
GGSN and SGSN. 

10. (Currently Amended) A system according to claim 1, wherein [[that 
an]] the access point is security indicated through providing an Access Point Name 
thereof with the security indication , o.g. an attr i bute . 

1 1 . (Currently Amended) A system according to claim 1 , wherein [[that]] 
the access point connections comprise Packet Data Protocol (PDP) contexts. 

12. (Currently Amended) A system according to claim 11, wherein the 
enforcement mechanism is dynamic, and i n that in the packet data support node 
means are provided for dropping all traffic packets of other PDP contexts not meeting 
the security criterium when a simultaneous PDP context to a security marked access 
point is used for communication of packets. 
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13. (Currently Amended) A system according to claim 12, wherein [[that]] 
the packet data node comprises means for detecting traffic on a PDP context to a 
security indicated access point, and means for activating security protection and i n that 
it further comprises means for, after lapse of a predetermined, configurable time period 
after sending of the last packet on a PDP context with a security indication, allowing 
traffic on other PDP contexts again. 

14. (Currently Amended) A system according to claim 1, wherein [[that]] 
the enforcement mechanism is static and i n th a t means are provided in a packet data 
support node for deactivating access point connections which do not meet the security 
criterium when a security condition is met for one connection to a security indicated 
access point. 

15. (Currently Amended) A system according to claim 14, wherein [[that 
a]] the security condition is met when a request is received in the packet data support 
node relating to activation of a PDP context to a security indicated APN. 

16. (Currently Amended) A system according to claim 14, wherein [[that 
a]] the security condition is met when a PDP context to a security marked APN has 
been activated in the packet data support node. 

17. (Currently Amended) A system according to claim 14, wherein [[that 
a]] the security condition is met when traffic packet is detected on a PDP context to a 
security indicated access point. 

18. (Currently Amended) A system according to claim 16, wherein [[that]] 
the packet data support node comprises means for re-activation of deactivated PDP 
contexts, and in that said means are end user controlled. 

19-37. (Canceled) 
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38. (Currently Amended) A method for enhancing security of end user 
station access to Internet and intranet, comprising the steps of: 

establishing [[if]] an access point needs to be secure; 
[[if yes,]] 

providing the access point with a security indication with one or more criteria in a 
network node, 

distributing the security indication to a packet data support node, 
enforcing the security indication by at least preventing all traffic on all access 
point connections conflicting a first security indicated access point connection through 
the security indicated access point and not fulfilling the security criteria at least until 
[[the]] a last packet of the security indicated access point connection has been sent. 

39. (Currently Amended) A method according to claim 38, wherein [[that 
it]] the step of distributing comprises the step of: 

providing the security indication in a gateway packet data node a in a home 
location register (HLR) or in a Domain Name Server (DNS). 

40. (Currently Amended) A method according to claim 38, wherein 
[[that]] the step of providing a security indication comprises, 

providing an Access Point Name (APN) with the security indication. 

41. (Currently Amended) A method according to claim 40, wherein 
[[that]] the access point connections comprise PDP contexts. 

42. (Currently Amended) A method according to claim 41, wherein 
[[that]] the enforcing step comprises: 

dropping all traffic packets of all other PDP contexts than a first incoming security 
requiring PDP context which do not meet the security criteria. 

43. (Currently Amended) A method according to claim 41, wherein 
[[that]] the enforcing step comprises: 
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deactivating all other conflicting PDP contexts than a first security requiring PDP 
context, which do not fulfill the security criteria. 
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